Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230392e302f32342d3234203d3e203138333933.roa
File:                     3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=
Subject key identifier:   47:17:5D:5D:B1:95:01:A1:69:F1:F7:06:3A:09:01:33:7A:8A:67:0E
Certificate issuer:       /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
Certificate serial:       643DAA1DCE812665368AD38915E3D602C7DE7EE2
Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230392e302f32342d3234203d3e203138333933.roa
Signing time:             Sun 03 May 2026 02:18:02 +0000
ROA not before:           Sun 03 May 2026 02:13:02 +0000
ROA not after:            Sun 02 May 2027 02:18:02 +0000
asID:                     18393
IP address blocks:        203.77.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl
                          rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3d:aa:1d:ce:81:26:65:36:8a:d3:89:15:e3:d6:02:c7:de:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1
        Validity
            Not Before: May  3 02:13:02 2026 GMT
            Not After : May  2 02:18:02 2027 GMT
        Subject: CN=47175D5DB19501A169F1F7063A0901337A8A670E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f3:0e:19:d7:67:a0:cc:48:bd:ee:52:d0:dd:
                    29:80:12:b9:b9:91:1e:f2:77:42:8b:cf:79:08:ff:
                    96:ab:e6:3d:79:5f:c4:c8:2f:e0:8b:33:d1:56:ae:
                    20:4c:ee:3b:ed:ca:29:9e:bc:19:b5:a2:87:72:25:
                    8c:4f:6f:e7:b7:f0:3e:5c:af:60:2d:b9:0a:ba:38:
                    a8:9c:48:83:fc:d0:4a:05:eb:6d:1e:da:32:86:71:
                    f9:ab:a8:d4:e0:11:92:8f:c7:fc:3c:5b:72:e8:cf:
                    9e:ac:87:05:73:14:6c:16:2c:e8:c5:23:38:3d:b3:
                    51:3c:0c:a6:48:3a:d9:1c:6c:40:c8:75:0c:aa:c6:
                    91:4b:f2:d3:df:3b:e0:c8:8a:d8:75:0b:61:9a:a1:
                    e1:45:ff:a1:49:a1:89:c3:ad:e8:c4:f7:05:50:6a:
                    8c:b3:3c:a2:8a:84:29:c5:79:c4:2f:46:09:a4:aa:
                    1b:2b:b5:6c:7d:4d:d0:a5:fc:48:62:d5:b2:e8:1f:
                    3d:82:c4:66:1b:8d:f9:97:2b:c9:0d:a4:ff:0e:ab:
                    1e:cf:6c:31:0d:83:4a:90:ef:32:bc:67:c0:25:b1:
                    48:18:c9:b0:1c:c6:3a:ba:f1:0a:f7:a4:22:20:5e:
                    95:4d:ef:21:30:5d:f6:fb:bb:3d:38:9a:a1:4a:c7:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:17:5D:5D:B1:95:01:A1:69:F1:F7:06:3A:09:01:33:7A:8A:67:0E
            X509v3 Authority Key Identifier:
                keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/3230332e37372e3230392e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:33:53:ef:ab:1f:b1:9d:a7:4b:0e:ad:1f:58:d0:ac:84:64:
         74:ef:a4:1d:b2:cf:76:f2:da:5c:77:64:3b:3f:82:b0:55:1b:
         5c:91:e7:36:c3:7f:39:7f:f8:71:5f:19:a4:28:71:27:59:b6:
         8e:aa:2f:3d:20:b3:c7:85:a1:aa:b6:48:f9:88:16:ae:3d:19:
         ac:ec:2c:db:da:2e:e1:89:9a:8e:91:4d:c2:b4:a4:73:fe:ff:
         0b:64:ce:78:74:6f:4c:a4:0d:9c:7e:81:36:d6:da:4c:25:71:
         77:f4:f2:3d:84:87:7d:05:73:cf:6c:77:cf:7a:39:3c:36:fc:
         f4:b2:61:87:63:5b:70:47:cb:b1:d9:fb:7c:5f:fe:34:51:2e:
         92:e2:27:64:84:d7:2d:dc:5b:1e:1d:3a:84:ce:c2:e1:fd:ac:
         61:10:e0:ce:a2:de:49:4c:a8:f8:6e:df:87:f6:0b:b0:d5:f5:
         ba:05:46:64:38:c7:56:f0:cf:9f:b3:0a:5b:32:0d:30:3b:1e:
         60:18:58:50:4e:d6:1e:d9:c6:b7:bc:8d:0e:a1:35:92:57:f2:
         35:eb:8b:f9:71:48:d7:16:48:7c:75:58:55:8d:b5:58:38:43:
         65:02:72:1a:21:fa:95:af:db:2d:4c:68:b5:15:c7:f9:e8:70:
         c6:7b:de:a1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZD2qHc6BJmU2itOJFePWAsfefuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2
RDlCN0FEMTAeFw0yNjA1MDMwMjEzMDJaFw0yNzA1MDIwMjE4MDJaMDMxMTAvBgNV
BAMTKDQ3MTc1RDVEQjE5NTAxQTE2OUYxRjcwNjNBMDkwMTMzN0E4QTY3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8w4Z12egzEi97lLQ3SmAErm5
kR7yd0KLz3kI/5ar5j15X8TIL+CLM9FWriBM7jvtyimevBm1oodyJYxPb+e38D5c
r2AtuQq6OKicSIP80EoF620e2jKGcfmrqNTgEZKPx/w8W3Loz56shwVzFGwWLOjF
Izg9s1E8DKZIOtkcbEDIdQyqxpFL8tPfO+DIith1C2GaoeFF/6FJoYnDrejE9wVQ
aoyzPKKKhCnFecQvRgmkqhsrtWx9TdCl/Ehi1bLoHz2CxGYbjfmXK8kNpP8Oqx7P
bDENg0qQ7zK8Z8AlsUgYybAcxjq68Qr3pCIgXpVN7yEwXfb7uz04mqFKxzBBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQURxddXbGVAaFp8fcGOgkBM3qKZw4wHwYDVR0j
BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0
NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3
QUQxLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFlMzE1OWYyLTBjZjAtNDNjNi1i
MjgyLWM2OWZiYTEzYTE0YS8wLzMyMzAzMzJlMzczNzJlMzIzMDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtN0TANBgkqhkiG
9w0BAQsFAAOCAQEAlzNT76sfsZ2nSw6tH1jQrIRkdO+kHbLPdvLaXHdkOz+CsFUb
XJHnNsN/OX/4cV8ZpChxJ1m2jqovPSCzx4WhqrZI+YgWrj0ZrOws29ou4YmajpFN
wrSkc/7/C2TOeHRvTKQNnH6BNtbaTCVxd/TyPYSHfQVzz2x3z3o5PDb89LJhh2Nb
cEfLsdn7fF/+NFEukuInZITXLdxbHh06hM7C4f2sYRDgzqLeSUyo+G7fh/YLsNX1
ugVGZDjHVvDPn7MKWzINMDseYBhYUE7WHtnGt7yNDqE1klfyNeuL+XFI1xZIfHVY
VY21WDhDZQJyGiH6la/bLUxotRXH+ehwxnveoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:26:14 2026 by rpki-client